Smart-Contracts
- Trustless Systems: ZK, DAOs, and the Architecture of Unstoppable Code
Tracking the development of trustless infrastructure: zero-knowledge proofs, zkEVM scaling, DAO governance experiments, smart contracts as programmable law, and the convergence of AI and cryptographic verification. This week: Drift Protocol lost $285M to an admin key compromise combined with oracle manipulation -- the largest DeFi exploit of 2026, and a clear demonstration of how trustless code fails when the control layer isn't trustless.
- Moonwell Rekt: When the AI Writes the Oracle and Nobody Catches the Missing Multiplication
A missing ETH/USD multiplication in a Moonwell oracle priced cbETH at $1.12 instead of $2,200. Liquidation bots extracted 1,096 cbETH in four minutes, leaving $1.78M in bad debt. The commit was co-authored by Claude Opus 4.6. What that actually means for engineers shipping AI-assisted production code.
- Q1 2026 DeFi Losses Hit $137M -- And Vibe Coding May Be Making It Worse
Q1 2026 DeFi losses have hit $137M across 15 incidents, already outpacing Q1 2025. With Resolv Labs restoring redemptions after an $80M unauthorized mint and IoTeX opening its compensation portal, there's a harder question worth asking: is AI-assisted smart contract development making the security picture worse?